Rolling out Copilot? Run this check first. It reads everything your staff can. →
A boutique Microsoft 365 architecture house: bespoke SharePoint intranets, Intune and automation, a read-only security-assessment suite, and Glow Cloud Kit, our self-serve web parts. Built to last, run securely, and a straight answer when you ask for one.
Read-only · minimal-permission · trusted by UK teams on Microsoft 365
What we do
Build it right. Run it clean. The same craft behind all three.
SharePoint & Power Automate
Bespoke intranets, and the flows that run the business behind them. Build it beautiful, automate the busywork.
Intune, done properly
Devices enrolled, compliant and secured, without locking people out of their work.
Assessments & governance
See who can actually reach what, and every external share - with a configuration baseline underneath. An independent, read-only read you can put on the record. Prove it's safe, keep it that way.
The audit engine
A proprietary, automated audit engine that reads your tenant and never writes to it. Honest posture scoring, every sharing link, and who can reach what, all in a report you own.
Microsoft-verified publisher · Glow Cloud M365 Security Framework · read-only, always
One account's real reach: Colin Rathbone lands on 16 sites - mostly through group nesting, two by direct grant - and inside them, 12 files where his access breaks from the site default. This is what a leaver, a contractor, or a busy admin account can actually get to. Static sample; the live report is fully interactive.
What clients say
Clients on working with Mark, founder and lead architect at Glow Cloud, across SharePoint, Intune, automation and migration, in the UK and worldwide.
Five-star reviews from independent, verified engagements.
Glow Cloud is led and delivered by Mark Berry. The person who scopes your work designs it, builds it, and stands behind it.
The free health-check
“We found 11 sites open to everyone in the company.”
A clear score, the six areas rated, and every finding listed, filterable and prioritised. Read-only, temporary access, and you stay in control.
Run my free scan →Why us, not a platform
Most Microsoft 365 governance tools are subscription portals: a standing connection to your tenant and your data living in their cloud. We work the other way round - a read-only look, and a report you keep.
And because a named person runs it and stands behind it, the result is independent evidence you can hand to an insurer, auditor or board - not a score you gave yourself. Why independence matters →
| Glow Cloud A report you own | A governance portal A subscription you rent | |
|---|---|---|
| Your data | A report you own; a single run is purged within 30 days. | Lives in their cloud for as long as you keep subscribing. |
| Access | Read-only, point-in-time, revocable the moment we're done. | A standing, always-on connection into your tenant. |
| The permission map | Who can reach which file, and exactly how they got there. | Setting-level flags, rarely the real-world consequence. |
| How you work | A fixed, prioritised snapshot you can finish - re-read each quarter. | A live feed of alerts to keep babysitting. |
Comparison is with typical subscription-based Microsoft 365 governance platforms, described in general terms. No specific product is named or implied.
See the full comparison →Glow Cloud Kit: premium web parts that make SharePoint beautiful
Org Chart · Section · Prism · 18 web parts · self-serve, 14-day trial
